Belahzur Posted November 26, 2009 ID:162444 Share Posted November 26, 2009 Hey guys. =]Another one for ya.Malwarebytes' Anti-Malware 1.41Database version: 3234Windows 5.1.2600 Service Pack 325/11/2009 20:53:17mbam-log-2009-11-25 (20-53-17).txtScan type: Quick ScanObjects scanned: 98061Time elapsed: 7 minute(s), 10 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\h2o (Trojan.Downloader) -> Quarantined and deleted successfully. [494845583053838075667915378088797780666970830107070155385152424847303934455238010707015253514247405230212625130121352122221921382122213620202019193823212336233601070701525351424740523018191301221721221717171721361718171917172123222021241918]Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\Program Files\SyncroSoft\POS\H2O\cledx.exe (Trojan.Downloader) -> Quarantined and deleted successfully. [494845583053838075667915378088797780666970830107070155385152424847303934455238010707015253514247405230212625130121352122221921382122213620202019193823212336233601070701525351424740523018191301221721221717171721361718171917172123222021241918]BC.com database info Link to post Share on other sites More sharing options...
nosirrah Posted November 26, 2009 ID:162452 Share Posted November 26, 2009 Zip and attach that file to your next post please , there is something I need to check . Link to post Share on other sites More sharing options...
Belahzur Posted November 26, 2009 Author ID:162458 Share Posted November 26, 2009 Will do nosirrah, I'll post back as soon as I can. Link to post Share on other sites More sharing options...
Belahzur Posted November 26, 2009 Author ID:162636 Share Posted November 26, 2009 Hi again nosirrah.Attachment below. cledx.zip Link to post Share on other sites More sharing options...
nosirrah Posted November 26, 2009 ID:162641 Share Posted November 26, 2009 http://www.virustotal.com/analisis/b10e5f7...fac9-1259254432The way they built this file is the cause of the FP , I will try to come up with a way to fix this that does not help the bad guys . Link to post Share on other sites More sharing options...
Belahzur Posted November 27, 2009 Author ID:162953 Share Posted November 27, 2009 Thank you nosirrah.Had a look at the result, similar to an AutoIT detection.I've had my user set this to ignore for now. Keep up the good work guys. Link to post Share on other sites More sharing options...
Nguyen Rock Posted July 16, 2010 ID:285042 Share Posted July 16, 2010 Hi again nosirrah.Attachment below. Thank u very much.. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now